$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c886de0-6a95-394f-b0ec-798264a9c720.roa File: 1c886de0-6a95-394f-b0ec-798264a9c720.roa (raw, json) Hash identifier: vJG9pNLjBBVAsKqDWvgGx4+hDnki6FqXy6GJpJdRs8Q= Subject key identifier: 9B:55:A3:92:FE:08:29:FD:8F:07:32:C4:1D:CF:64:B5:63:2F:EF:C9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E059C7831F45AB3AF71C58480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c886de0-6a95-394f-b0ec-798264a9c720.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 12041 IP address blocks: 2001:500:c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:78:31:f4:5a:b3:af:71:c5:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=11c03e9a-36f8-4506-a325-c3779c1cc058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:4f:83:dc:8e:27:9e:db:79:5e:f4:d8:30: 6d:10:fc:e2:a1:ba:2a:d8:12:a2:fb:fa:0e:a9:8d: 84:13:64:bb:8c:ce:5c:4e:83:2d:7c:14:b8:3d:08: 11:82:e6:b7:96:83:d3:fc:9b:97:cf:2d:16:bb:52: cf:4a:d5:ea:57:76:00:a5:70:37:b3:d0:e5:ec:0f: 64:a2:c8:52:28:88:f9:45:a8:3c:93:64:9b:86:e6: ca:22:a4:5a:fa:ab:58:21:cd:7b:4a:5c:ca:bf:ac: d9:d4:5e:98:2a:a9:77:00:47:d3:23:0b:b7:e7:28: a1:96:e3:4c:df:35:dd:a6:36:92:ac:71:f7:6d:bb: c1:ad:b1:93:bc:87:14:0f:90:33:31:50:6b:20:7d: be:10:88:58:36:27:e7:71:45:e0:a1:6e:01:6b:b8: 09:68:b2:f3:d9:aa:6d:ca:2d:db:28:6f:ba:50:e5: 15:d1:c1:97:2b:47:3a:a3:4b:9e:33:bb:a6:9f:14: 24:2b:b2:22:b4:29:12:e1:26:09:3a:09:7b:c9:e0: 0c:2c:08:59:07:99:dc:b6:10:3a:fd:ee:e3:9c:96: 14:b5:f9:46:90:10:a8:5e:fe:28:ff:3d:c3:25:9c: 6c:27:44:95:44:b9:72:4c:08:1e:f7:32:49:58:13: 55:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:55:A3:92:FE:08:29:FD:8F:07:32:C4:1D:CF:64:B5:63:2F:EF:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c886de0-6a95-394f-b0ec-798264a9c720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a9:95:20:af:07:61:80:8e:1b:d5:a5:37:7c:39:52:35:03: 0f:ab:a4:5d:e2:63:a6:19:a4:ce:4d:54:79:8c:2a:62:a5:76: e1:78:5b:cf:20:ab:3d:8f:4b:34:ee:e8:a6:38:92:0f:58:0a: ea:da:78:2e:92:d4:96:92:1d:b7:f9:8d:cb:88:4e:67:b4:33: 52:de:27:d9:56:1b:45:1e:1e:17:e9:01:b3:d8:eb:16:b8:06: 8d:06:d0:29:b5:44:25:96:58:ec:ad:34:15:b2:ed:12:cc:c6: 74:f0:f1:f3:02:fa:9d:ab:0d:b7:b4:89:87:10:23:ec:b5:f5: ec:ec:a2:55:38:f1:39:3a:19:0d:fc:86:3d:7b:fc:b7:43:8d: f0:54:b2:63:8d:6b:8a:19:81:2c:82:e3:b5:b3:80:25:32:0a: 3e:1f:52:93:d5:ee:80:b3:c0:e5:53:7c:09:e0:09:46:06:ef: 47:5a:9c:07:f3:83:58:78:ed:75:19:28:41:3e:c9:f9:40:24: ed:c6:aa:3d:8d:ac:62:70:c3:6a:ae:81:dd:ff:18:4f:3f:2b: c0:ac:80:d7:30:36:47:4e:cb:9e:37:ea:84:50:e2:87:36:4e: 6f:5c:e8:6a:2d:c3:85:8c:0b:2d:ef:cd:6d:9a:e2:9f:c3:80: 3f:5c:50:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnHgx9Fqzr3HFhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MTFjMDNlOWEtMzZmOC00NTA2LWEzMjUtYzM3NzljMWNjMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnZPg9yOJ57beV702DBtEPzioboq2BKi+/oO qY2EE2S7jM5cToMtfBS4PQgRgua3loPT/JuXzy0Wu1LPStXqV3YApXA3s9Dl7A9k oshSKIj5Rag8k2SbhubKIqRa+qtYIc17SlzKv6zZ1F6YKql3AEfTIwu35yihluNM 3zXdpjaSrHH3bbvBrbGTvIcUD5AzMVBrIH2+EIhYNifncUXgoW4Ba7gJaLLz2apt yi3bKG+6UOUV0cGXK0c6o0ueM7umnxQkK7IitCkS4SYJOgl7yeAMLAhZB5ncthA6 /e7jnJYUtflGkBCoXv4o/z3DJZxsJ0SVRLlyTAge9zJJWBNVywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJtVo5L+CCn9jwcyxB3PZLVjL+/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWM4ODZkZTAtNmE5NS0z OTRmLWIwZWMtNzk4MjY0YTljNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD6plSCvB2GAjhvVpTd8OVI1Aw+rpF3iY6YZpM5NVHmMKmKlduF4 W88gqz2PSzTu6KY4kg9YCuraeC6S1JaSHbf5jcuITme0M1LeJ9lWG0UeHhfpAbPY 6xa4Bo0G0Cm1RCWWWOytNBWy7RLMxnTw8fMC+p2rDbe0iYcQI+y19ezsolU48Tk6 GQ38hj17/LdDjfBUsmONa4oZgSyC47WzgCUyCj4fUpPV7oCzwOVTfAngCUYG70da nAfzg1h47XUZKEE+yflAJO3Gqj2NrGJww2qugd3/GE8/K8CsgNcwNkdOy5436oRQ 4oc2Tm9c6Gotw4WMCy3vzW2a4p/DgD9cUAU= -----END CERTIFICATE-----Generated at Sat Jun 13 16:31:37 2026 by rpki-client